$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: T6XrFjUZb1/NHJutvG3fh5ttUo1xaBHc/Dc4sa35dU8= Subject key identifier: 8D:CF:F3:92:45:2B:2B:45:19:89:BA:56:3C:2F:D0:E6:82:F8:A2:7A Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 36 Signing time: Sat 31 May 2025 07:10:57 +0000 Manifest this update: Sat 31 May 2025 07:10:56 +0000 Manifest next update: Sat 07 Jun 2025 07:10:56 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: aMGh1gilUoe+2wgv9K0fGvVhjcG7pHH80QV8GjAkt2g=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: May 31 07:10:56 2025 GMT Not After : Jun 7 07:10:56 2025 GMT Subject: CN=683aab81-90be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:80:0f:20:d3:50:4f:7e:49:02:80:90:4b: 71:5b:76:9f:85:48:77:5c:2c:48:2d:d0:27:e2:0c: a0:ee:97:e5:9b:57:ff:85:2a:1e:75:75:64:bf:6a: 42:aa:d1:07:32:73:6e:d9:0a:42:78:d9:90:1b:6a: d1:1d:47:98:8f:0d:5c:d3:03:59:c6:7b:6d:7c:9c: bc:3c:b3:63:84:5a:b1:32:11:6c:a6:ac:4b:ca:1b: 96:1f:d7:96:07:93:a0:0a:90:19:eb:b7:19:e0:72: 75:d7:39:2b:33:3a:2f:b6:64:81:46:e4:49:1d:34: 56:f7:6a:b0:81:ac:db:fc:b0:92:06:28:69:aa:d7: 05:1d:e9:ca:29:72:8a:eb:03:35:00:05:1c:67:ec: 3b:57:82:8c:6b:5a:ab:19:cd:c3:66:d8:22:c0:c7: a2:c7:ef:38:28:22:d6:ed:cb:16:1d:3e:e8:c6:4f: e4:a0:dc:50:9e:55:35:82:e0:84:8c:8b:39:ea:4f: dc:55:f6:93:b0:78:e2:43:43:af:f8:7b:e5:8f:f1: 82:d1:ec:99:1b:60:72:4f:26:66:d7:c1:22:c6:ef: 32:8d:cd:0b:73:63:7b:87:bb:6f:73:67:8c:5b:0d: 29:3d:89:26:ba:a8:2a:da:57:bd:69:71:1e:bf:02: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CF:F3:92:45:2B:2B:45:19:89:BA:56:3C:2F:D0:E6:82:F8:A2:7A X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:44:25:7b:17:ab:29:3c:91:42:aa:3f:97:ac:71:a3:0b:c7: 4a:8a:d0:b0:38:00:15:3d:52:ff:f6:5f:08:78:dc:c9:3d:cd: a0:b5:bc:63:24:3b:1b:49:86:c6:4f:4f:32:52:96:f2:bc:dd: 65:25:f5:93:5f:8c:0a:28:1c:d9:8d:56:b2:08:60:60:ec:66: fb:00:b5:93:79:ea:1a:69:24:dd:22:4c:7d:b0:8c:ec:13:7a: 3f:ef:0a:a7:4b:8a:cb:c0:04:be:9a:91:bd:01:75:15:96:32: 38:83:a8:2c:b1:a9:1c:60:13:25:01:87:f2:0e:48:40:48:d5: ef:79:47:45:56:e2:75:6a:8c:96:ee:6d:bd:0f:6d:e2:93:53: b2:a5:08:50:a6:2a:6b:1f:c2:68:58:aa:ae:3e:7d:23:83:87: 16:70:58:0a:a2:d8:ea:a0:69:b9:dd:7c:68:92:0b:79:f0:7d: 53:b3:99:bb:48:69:d9:d1:36:62:42:c9:c0:52:ee:4a:44:ca: f5:4f:55:e0:6e:67:85:0b:9a:0f:fe:3d:e8:3c:3b:0f:e4:b8: ef:57:9e:ea:da:65:01:ef:c4:e9:fb:aa:c5:fb:72:70:cf:8c: 33:91:f7:7f:79:8d:92:2a:cc:4a:b1:b5:00:a0:e4:ca:43:80: 40:f6:1a:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA1MzEwNzEwNTZaFw0yNTA2MDcwNzEwNTZaMBgxFjAUBgNV BAMTDTY4M2FhYjgxLTkwYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzNYAPINNQT35JAoCQS3Fbdp+FSHdcLEgt0CfiDKDul+WbV/+FKh51dWS/akKq 0Qcyc27ZCkJ42ZAbatEdR5iPDVzTA1nGe218nLw8s2OEWrEyEWymrEvKG5Yf15YH k6AKkBnrtxngcnXXOSszOi+2ZIFG5EkdNFb3arCBrNv8sJIGKGmq1wUd6copcorr AzUABRxn7DtXgoxrWqsZzcNm2CLAx6LH7zgoItbtyxYdPujGT+Sg3FCeVTWC4ISM iznqT9xV9pOweOJDQ6/4e+WP8YLR7JkbYHJPJmbXwSLG7zKNzQtzY3uHu29zZ4xb DSk9iSa6qCraV71pcR6/Aj+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjc/zkkUr K0UZibpWPC/Q5oL4onowHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpEJXsXqyk8kUKqP5escaMLx0qK0LA4ABU9Uv/2Xwh43Mk9zaC1vGMk OxtJhsZPTzJSlvK83WUl9ZNfjAooHNmNVrIIYGDsZvsAtZN56hppJN0iTH2wjOwT ej/vCqdLisvABL6akb0BdRWWMjiDqCyxqRxgEyUBh/IOSEBI1e95R0VW4nVqjJbu bb0PbeKTU7KlCFCmKmsfwmhYqq4+fSODhxZwWAqi2OqgabndfGiSC3nwfVOzmbtI adnRNmJCycBS7kpEyvVPVeBuZ4ULmg/+Peg8Ow/kuO9XnuraZQHvxOn7qsX7cnDP jDOR9395jZIqzEqxtQCg5MpDgED2Gts= -----END CERTIFICATE-----Generated at Sat May 31 17:32:56 2025 by rpki-client